Who handles your information
EnrolFlow is operated by Ignite Online Pty Ltd. Schools use EnrolFlow to manage admissions and school communications. The school’s collection notice explains its purposes and requirements. This notice describes EnrolFlow’s service and our handling of direct enquiries.
Information involved
Depending on the school’s forms and enabled features, records may include family and student details, contact information, relationships, enquiries, event bookings, application answers, documents, communication preferences and delivery history. Some school records may include health, disability or other sensitive information. Only provide information requested for the relevant school process.
Why information is handled
Information supports the school’s admissions and communication workflows, account access, support, security and service operation. Direct enquiries to our team are used to respond and discuss the service. Contacting us or submitting a school enquiry is not, by itself, a request to subscribe to unrelated marketing.
Cookies and device storage
Sign-in and private newsletter access use session mechanisms, including cookies. Forms may store a recovery draft on your device for up to 24 hours and clear it after successful submission. Use care on shared devices. Security and service operation may involve IP addresses, browser information and request logs; some abuse controls use hashed request fingerprints.
Service measurement
Staff product telemetry can be associated with the staff account and school. Form measurement uses hashed random session identifiers and records views, starts and approximate abandonment separately from saved submissions. Private newsletters record link opens, confirmed visits and story engagement through recipient-linked reader sessions. These records should not be understood as anonymous simply because session tokens are hashed.
Website and conversion measurement
Public product pages may use Vercel Web Analytics. School-configured conversion measurement may send limited submission signals to Google services. Cookieless measurement can still involve information handling by a provider. Refer to the school’s notice for its enabled tracking and contact the school about its choices.
Service providers and overseas processing
Depending on enabled services, providers include Vercel for hosting and website analytics, Supabase for database and authentication, and AWS for infrastructure, storage and message delivery. Optional services include Stripe for payments, Twilio for SMS, OpenAI for newsletter assistance and Google for school-configured measurement. Provider processing, support and subcontractors can involve locations outside Australia. Contact us for the service-specific provider and location information relevant to your school before enabling an optional integration.
Retention and school requests
Retention depends on the record’s purpose, the school’s requirements, applicable law and any legal hold. Technical logs, engagement records and school business records can require different treatment. A request does not automatically delete records that the school or operator must lawfully retain. School-record access, correction and deletion requests should go to the school so identity and authority can be checked.
Children and family authority
School records can concern children and complex family relationships. A request involving a child’s information may require the school to verify identity, authority and any relevant restrictions. Do not assume that access to an email address or a family link establishes authority over every related record.
Privacy enquiries and complaints
Contact us using the privacy address below to ask about our handling of information, request access or correction, or raise a complaint. Tell us which school or service is involved and how we can respond. Please do not include identity documents, medical records or other sensitive attachments in your first email. We may need to verify identity or coordinate with the school.
team@bestschools.com.au · Ignite Online Pty Ltd
You can also seek information about privacy complaints from the Office of the Australian Information Commissioner. Other regulators may be relevant to your school and the information involved.